CVE-2020-8485
ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300
- State
- Published
- Severity
- 7.8 High
- Published
- Apr 29, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jan 30, 2020
Description
Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | ABB |
Weaknesses
- CWE-264 Permissions, Privileges, and Access Controls
Affected Products
| Product | Versions |
|---|---|
800xA for MOD300ABB |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.